Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rWnvkMhKPfEN1cvydUej6xS2BMw.roa
File: rWnvkMhKPfEN1cvydUej6xS2BMw.roa (raw, json)
Hash identifier: eO6pWwIktokJs7Nmre1Xxr37ilLPNzbWNCCv9ArYtkY=
Subject key identifier: AD:69:EF:90:C8:4A:3D:F1:0D:D5:CB:F2:75:47:A3:EB:14:B6:04:CC
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018ADD89A53CC456C99EB876FB731AAAAC16
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rWnvkMhKPfEN1cvydUej6xS2BMw.roa
Signing time: Thu 28 Sep 2023 20:44:59 +0000
ROA not before: Thu 28 Sep 2023 20:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4213
IP address blocks: 91.186.208.0/23 maxlen: 24
91.186.210.0/23 maxlen: 24
83.147.240.0/23 maxlen: 24
83.147.242.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:89:a5:3c:c4:56:c9:9e:b8:76:fb:73:1a:aa:ac:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 28 20:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad69ef90c84a3df10dd5cbf27547a3eb14b604cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:77:46:ae:26:81:a4:86:af:4a:44:a1:c6:
45:bf:29:d8:b1:c8:6e:12:21:6a:54:75:32:b0:66:
30:d8:4f:eb:fc:f3:a4:65:c1:f2:62:86:05:dd:3f:
4f:b7:02:7a:1c:b1:c6:51:b8:6a:6f:19:7e:e8:e7:
53:cb:2f:83:83:ec:b5:2a:b4:88:df:eb:8a:fe:d4:
a9:96:bd:66:8a:9f:3a:b2:f8:44:91:be:43:d5:9a:
c0:a2:82:75:6f:d0:a0:c7:7e:46:a6:43:91:cf:42:
21:9d:95:76:c8:ef:6f:ae:8a:cf:c3:44:ef:ca:30:
98:c6:f9:be:6e:52:77:d0:d9:fa:21:be:5d:09:0b:
55:2d:91:1b:50:04:f7:92:68:39:5a:ad:54:1d:1d:
9d:c5:e6:45:1e:ec:c9:44:99:9f:80:92:6e:b0:ba:
60:73:66:5c:4a:05:f2:0f:6a:30:b9:d5:7e:38:2b:
e7:6c:60:08:26:64:b7:e0:8a:78:43:2f:1d:c4:00:
d8:4e:e3:fc:a5:06:fd:16:de:b2:05:74:89:e5:58:
15:4c:fc:e3:8e:fa:68:fd:af:dd:b0:2b:80:1e:71:
9a:91:4e:b2:9b:07:ad:de:1d:11:63:9c:64:af:6b:
0d:5d:c9:a4:69:f0:63:f5:30:bf:03:88:49:95:65:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:69:EF:90:C8:4A:3D:F1:0D:D5:CB:F2:75:47:A3:EB:14:B6:04:CC
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/rWnvkMhKPfEN1cvydUej6xS2BMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/22
91.186.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:de:ba:d7:3f:35:fb:93:be:a7:76:24:5d:e0:9d:6b:ca:27:
59:4c:63:2e:0b:ec:26:c4:31:22:39:0e:35:21:a4:e3:09:63:
78:ce:38:55:b5:c4:7b:3f:6e:ac:c8:ce:fc:a4:f0:0d:e4:fc:
1f:48:bc:4f:fe:5d:63:4f:2e:41:06:99:2e:5e:ab:6e:25:14:
31:d1:2f:de:e5:99:92:2c:85:57:fb:33:d5:a5:3e:8b:cc:28:
5c:55:f4:cc:80:b3:ad:7a:e0:21:b5:9b:91:62:4f:3a:9e:45:
f8:5b:e5:4e:36:cb:cf:a8:ca:9d:48:29:ec:c8:47:f8:86:77:
2a:83:8a:40:00:a9:77:6b:4b:cf:62:81:e0:34:6a:df:88:16:
0b:e6:1f:f6:f9:a9:aa:43:58:c9:50:66:05:20:78:6d:d6:cf:
99:37:8c:29:6e:fe:ac:89:3d:86:1e:b9:13:84:7e:35:0c:03:
32:be:f1:5d:bd:41:5c:0f:40:4a:de:09:52:88:8a:4f:ae:51:
96:8b:4f:e4:fc:a0:c4:35:30:e2:28:08:a1:a9:0e:91:95:4d:
3e:ff:07:08:82:a6:64:5e:ec:eb:c7:42:2b:ad:f4:4e:13:65:
a8:f3:71:78:fc:88:81:04:48:37:89:d4:c5:a2:e9:68:1f:0a:
53:c8:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:36 2024 by rpki-client on console-ams.rpki-client.org